Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
File: Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft (raw, json)
Hash identifier: nEWez/+kQTnkucBbIslOfsufo3HZiL+QQk67+htOG4M=
Subject key identifier: 7D:AB:79:BB:CC:F8:A6:EE:68:F7:AE:49:5A:3F:C2:05:87:78:65:5F
Authority key identifier: 52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
Certificate issuer: /CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Certificate serial: 01987FAF5F8754E89D242659CBF58E9C1A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
Manifest number: 0C88
Signing time: Wed 06 Aug 2025 14:00:56 +0000
Manifest this update: Wed 06 Aug 2025 14:00:56 +0000
Manifest next update: Thu 07 Aug 2025 14:00:56 +0000
Files and hashes: 1: NwhX1fpUUKISwRaP6RgnnH_Cl-k.roa (hash: 46uueaf8TwY6xllVk4bGf8Po+XSFPtY1TUSEHJE8zWc=)
2: Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl (hash: ujSVsXWtdEFcY98rmN1vck9ssmFkztLAv2SIVonHkBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:af:5f:87:54:e8:9d:24:26:59:cb:f5:8e:9c:1a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=524e5f7961225fbfe341f6bfd6be8e1a21ef8c0f
Validity
Not Before: Aug 6 14:00:56 2025 GMT
Not After : Aug 7 14:00:56 2025 GMT
Subject: CN=7dab79bbccf8a6ee68f7ae495a3fc2058778655f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7f:96:5c:d4:c5:94:b1:e5:9f:06:4a:17:5f:
31:8a:d1:40:97:aa:1f:55:9c:a4:c4:6f:ab:ab:0a:
46:24:f1:04:e5:99:68:b9:13:36:58:e4:cf:92:c2:
71:40:af:2c:7c:3e:74:e8:43:0a:48:d5:f3:38:53:
6f:4d:f0:7f:67:39:e5:68:cd:e1:aa:2d:5c:b9:77:
5a:54:ad:2e:a8:24:a6:14:28:c8:b5:e8:cd:0b:d9:
73:70:7c:64:1c:3d:33:4d:c4:b5:47:b6:d2:82:33:
6c:b6:e6:c7:ff:90:53:69:29:ed:d2:66:bd:c6:54:
11:29:f0:d9:2a:2f:40:1b:73:88:91:37:fe:f0:cb:
9f:91:cc:37:d0:32:3f:1c:d0:76:54:f4:f8:98:c1:
28:5d:5d:4e:43:52:10:80:31:a4:43:b9:97:27:9a:
7d:21:c0:97:34:0d:aa:4e:57:61:60:a8:6d:3e:47:
b9:9a:90:bf:ea:7f:0d:71:2c:04:44:89:f4:e6:26:
1f:88:34:5f:ef:ac:c6:c5:59:f4:00:ef:ee:b0:30:
f5:9e:d9:d6:8d:1b:b4:f7:31:7d:f8:eb:76:b2:fc:
1f:53:98:99:9e:5e:71:d0:3c:9c:e0:ad:ee:30:ba:
07:25:5b:d4:85:a8:5d:89:a4:fe:ea:ef:6d:c1:ee:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AB:79:BB:CC:F8:A6:EE:68:F7:AE:49:5A:3F:C2:05:87:78:65:5F
X509v3 Authority Key Identifier:
keyid:52:4E:5F:79:61:22:5F:BF:E3:41:F6:BF:D6:BE:8E:1A:21:EF:8C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uk5feWEiX7_jQfa_1r6OGiHvjA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9c6546-5811-4194-bfeb-2ab9046ebc11/1/Uk5feWEiX7_jQfa_1r6OGiHvjA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:12:62:5a:cb:94:59:dc:bc:8d:f2:ea:06:b0:f6:91:52:53:
fb:c6:f3:52:ad:c6:5d:18:f5:95:a6:3d:8f:37:56:c7:82:02:
0c:27:82:65:48:40:9a:ff:db:3f:50:9a:3b:df:a5:a3:b1:2c:
67:59:b3:6d:3b:de:09:06:a6:52:1f:ed:74:c3:b7:f6:3d:b7:
39:c0:64:51:3c:6c:fc:d1:60:0d:d9:93:45:c4:bc:17:5b:ea:
79:66:34:32:9d:83:4b:66:d9:58:8e:dc:e2:3c:70:fc:47:a6:
94:21:04:b6:07:e5:c7:b1:12:1b:9f:59:5b:65:7d:09:57:63:
71:04:bb:16:eb:8d:a4:23:ad:d5:f1:4e:d2:66:8d:32:90:2a:
4d:3e:9b:ac:62:dd:e0:10:cd:d1:ed:d0:73:c4:3b:a3:2a:5e:
15:73:4d:3f:b4:dc:b0:1d:b7:d9:4d:57:2a:ea:01:67:7a:9a:
f3:49:27:27:81:3e:2c:e4:18:67:da:4d:a2:7f:38:0c:12:45:
89:94:05:7b:5f:e7:2a:ac:c7:03:b9:7e:85:6f:d5:b7:ee:a6:
1c:fc:de:7e:ef:9d:11:92:6d:71:6d:00:37:81:c7:51:12:b4:
b2:9f:a1:7b:2d:2e:59:93:00:24:a5:e0:da:ed:f1:53:91:41:
0d:1e:b9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:14:50 2025 by rpki-client